c2pa-rs

A fork of https://github.com/contentauth/c2pa-rs/
git clone git://archive.git.mtrnord.blog/mtrnords-photography-manager/c2pa-rs.git
Log | Files | Refs | README

deny.toml (1090B)


      1 # Configuration used for dependency checking with cargo-deny.
      2 #
      3 # For further details on all configuration options see:
      4 # https://embarkstudios.github.io/cargo-deny/checks/cfg.html
      5 
      6 [graph]
      7 targets = [
      8     { triple = "x86_64-unknown-linux-gnu" },
      9     { triple = "x86_64-apple-darwin" },
     10     { triple = "x86_64-pc-windows-msvc" },
     11     { triple = "aarch64-apple-darwin" },
     12     { triple = "wasm32-unknown-unknown" },
     13 ]
     14 
     15 [advisories]
     16 yanked = "deny"
     17 
     18 ignore = [
     19   "RUSTSEC-2021-0127", # serde_cbor
     20   "RUSTSEC-2023-0071", # rsa Marvin Attack: (https://jira.corp.adobe.com/browse/CAI-5104)
     21 ]
     22 
     23 [bans]
     24 multiple-versions = "allow"
     25 
     26 [licenses]
     27 allow = [
     28   "Apache-2.0",
     29   "BSD-2-Clause",
     30   "BSD-3-Clause",
     31   "CC0-1.0",
     32   "ISC",
     33   "LicenseRef-ring",
     34   "MIT",
     35   "MPL-2.0",
     36   "Unicode-DFS-2016",
     37   "Zlib",
     38 ]
     39 confidence-threshold = 0.9
     40 
     41 [[licenses.clarify]]
     42 name = "ring"
     43 expression = "LicenseRef-ring"
     44 license-files = [
     45   { path = "LICENSE", hash = 3171872035 }
     46 ]
     47 
     48 [sources]
     49 unknown-registry = "deny"
     50 unknown-git = "deny"
     51 allow-registry = ["https://github.com/rust-lang/crates.io-index"]
     52 allow-git = []